Privacy Policy
Last updated 15 October 2026.
This policy explains what personal data Tonight Media collects through tonightmedia.co.th, why we collect it and what choices you have, in line with Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Tonight Media is the data controller for the data described here.
Who we are
Tonight Media, 4296 Dindaeng Rd, Dindaeng, Bangkok 10400, Thailand. For any privacy question or request, email [email protected].
What we collect and why
- Enquiries. When you use our contact form we collect your name, email, and optionally your phone number, company, the service you're interested in, budget and message, plus the page you sent it from and any campaign tags (UTM) in the link you arrived by. We use this only to reply to you and to discuss your project. Our legal basis is taking steps at your request before entering into a contract.
- Automatic reply. After you send the form we email you a confirmation. It contains no marketing, and we don't add you to a mailing list.
- Spam protection. The form uses Google reCAPTCHA v3, which collects device and browser information and may set cookies to tell people from bots. Google's privacy policy and terms apply. We store a one-way, keyed hash of your IP address, not the address itself, to limit repeated submissions. Our legal basis is our legitimate interest in keeping the form free of abuse.
- Analytics. With your consent, Google Analytics 4 sets cookies to measure how the site is used. We also use Umami, a privacy-friendly analytics tool that sets no cookies and stores no personal data, so it runs without consent. Until you accept, Google Analytics isn't loaded at all.
- Chat. The chat window is provided by ChatPap. If you start a chat, the messages and any details you share are processed so our team can reply.
- Server logs. Like any website, our hosting records technical request data (such as IP address, browser and the page requested) for security and troubleshooting. These logs are kept for a short period and then deleted.
Cookies and similar storage
- Essential: a session cookie and a security token (XSRF) so forms work safely. These can't be switched off.
- Preferences: your light or dark theme choice and your cookie choice are saved in your browser's local storage. They never leave your device.
- Analytics (optional): Google Analytics cookies (names starting with
_ga), set only if you select "Accept analytics". - Third-party: reCAPTCHA and the ChatPap chat widget may set their own cookies to work.
You can change your analytics choice at any time with the "Cookie settings" link at the bottom of every page, or clear cookies in your browser.
Who we share it with
Your enquiry is emailed to our team and may be posted to our internal team chat (for example Slack or Discord) so the right person can respond. We use service providers for hosting, email delivery, analytics, spam protection and chat, who process data only on our instructions. We do not sell your data, and we don't share it with other companies for their own marketing.
Transfers outside Thailand
Some of these providers, including Google, store or process data on servers outside Thailand. When that happens we rely on the provider's contractual safeguards and data protection standards, as the PDPA permits.
How long we keep it
We keep enquiries for as long as needed to respond and follow up, and for no longer than 3 years after our last contact, unless you become a client and a longer period is required by law (for example, for accounting records).
How we protect it
The site is served only over HTTPS, the admin area is restricted to our staff, and enquiries are stored in a private database. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.
Your rights
Under the PDPA you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent at any time. Withdrawing consent doesn't affect anything we did before. Email [email protected] to make a request; we'll reply within 30 days. If you're unhappy with how we handle your data, you can complain to the Office of the Personal Data Protection Committee (PDPC).
Other websites and our tools
This site links to other websites, including our own products Reportly, Cashy and ChatPap. Each has its own privacy policy, and this policy doesn't cover them.
Children
This site is for businesses and isn't aimed at children. We don't knowingly collect data from anyone under 20 without a guardian's consent.
Changes
We'll update this page if our practices change and revise the date at the top.